You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/02/20 08:57:44 UTC
svn commit: r1448024 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Feb 20 07:57:44 2013
New Revision: 1448024
URL: http://svn.apache.org/r1448024
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1448024&r1=1448023&r2=1448024&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Feb 20 07:57:44 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201302192
+## khop-sc-neighbors.cf v 201302202
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:5\.126\.145|8\.172\.184)|2(?:1\.144\.174|0\.128\.2)|03\.9\.15[67])|2(?:1(?:3\.230\.128|8\.38\.13)|22\.174\.255)|67\.198\.252|59\.37\.168|72\.9\.145)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:(?:1\.144\.17|4\.243\.12)4|0\.84\.13)|03\.9\.15[67]|78\.172\.184|10\.93\.128)|2(?:0(?:3\.166\.220|5\.234\.145)|13\.230\.128)|67\.198\.252|59\.37\.168|84\.235\.91)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.(?:9\.15[67]|244\.2)|9\.236\.8[58])|75\.106\.72|20\.84\.13|44\.76\.6)|2(?:10\.(?:2(?:45\.226|1\.244)|168\.50)|03\.1(?:43\.115|66\.220))|80\.36\.130)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.(?:9\.15[67]|244\.2)|9\.236\.8[58])|20\.(?:128\.2|84\.13)|75\.106\.72|44\.76\.6)|2(?:10\.(?:2(?:45\.226|1\.244)|168\.50)|03\.143\.115)|80\.36\.130)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:2(?:1\.225\.25|0\.31\.1)0|16\.130\.34)|92\.35\.13)|7\.(?:(?:102\.116\.25|218\.10\.2)3|52\.82\.234|34\.72\.51)|5\.(?:1(?:08\.28\.69|13\.30\.62)|249\.161\.90)|9\.(?:134\.251\.187|36\.138\.131|40\.53\.90)|0\.(?:93\.128\.(?:40|6)|45\.145\.24)|8\.(?:165\.209\.101|99\.251\.45)|1\.252\.163\.242|6\.124\.128\.193|3\.163\.22\.178|4\.41\.129\.77)|2(?:1\.(?:(?:144\.174\.1|66\.181\.20)2|78\.(?:112\.164|90\.216)|22\.127\.17)|4\.(?:1(?:25\.156\.52|65\.228\.18)|(?:243\.124\.20|7\.41\.1)6)|5\.(?:69\.132\.100|75\.235\.127|88\.125\.219)|3\.(?:254\.110\.119|18\.151\.1)|0\.88\.217\.212|2\.225\.62\.211|8\.121\.86\.224)|9(?:0\.(?:1(?:0(?:7\.140\.74|9\.164\.81)|74\.31\.187)|85\.49\.243|25\.231\.8)|5\.(?:16(?:1\.40\.10|2\.48\.72)|225\.59\.111)|2\.1(?:51\.145\.1[67]2|74\.84\.47)|8\.23\.143\.(?:34|47|59)|4\.158\.204\.250)|0(?:9\.(?:2(?:36\.8(?:5\.(?:5[67]|6[24]|48)|8\.20[0345])|05\.252\.215)|68\.190\.44|87\.168\.26)|3\.(?:244\.2\.(?:1
[16]|22)|9\.157\.1(?:07|74))|1\.44\.3\.50)|7(?:8\.1(?:5(?:0\.156\.219|1\.86\.1)|63\.105\.52)|5\.(?:126\.145\.247|41\.18\.90)|6\.5(?:3\.233\.76|7\.72\.75)|7\.(?:36\.243\.6|99\.203\.2))|8(?:7\.(?:9\.219\.104|17\.53\.10)|0\.176\.167\.183|1\.53\.76\.120|8\.230\.75\.76)|4(?:(?:1\.105\.27\.13|4\.76\.6\.17)4|0\.133\.9\.106|9\.255\.3\.158)|(?:30\.193\.121\.16|\.85\.17\.8)2|59\.224\.76\.65)|2(?:1(?:8\.(?:2(?:0(?:7\.195\.204|4\.174\.28)|4(?:1\.238\.141|8\.16\.180)|32\.109\.194|2\.180\.228)|56\.37\.250|61\.18\.178|93\.193\.27|38\.13\.31)|0\.(?:2(?:1(?:0\.12(?:5\.134|3\.47)|7\.196\.58|\.244\.125)|45\.226\.87)|1(?:8(?:3\.11\.151|\.188\.206)|68\.50\.16))|3\.(?:2(?:30\.128\.226|21\.9\.13)|192\.3\.66|55\.72\.14)|1\.(?:2(?:06\.121\.66|45\.23\.133)|104\.184\.195)|7\.(?:197\.72\.124|200\.184\.87)|9\.147\.172\.2)|0(?:2\.1(?:1(?:1\.196\.21|3\.65\.229)|0(?:5\.134\.41|4\.22\.42)|91\.2(?:50\.202|00\.58))|3\.(?:1(?:4(?:4\.170\.98|5\.84\.73)|66\.220\.159)|237\.226\.116)|5\.234\.145\.1(?:3[02]|40)|9\.
238\.180\.110|0\.107\.124\.36)|2(?:1\.2(?:14\.2(?:08\.226|14\.187)|34\.24\.46|\.144\.135)|2\.(?:174\.255\.238|92\.112\.66|74\.200\.2)|0\.90\.201\.236))|5(?:8\.(?:2(?:1(?:3\.157\.68|5\.81\.185)|27\.21\.27)|64\.(?:228\.224|177\.63)|120\.227\.143)|9\.(?:(?:37\.168\.1|60\.7\.14)6|90\.(?:192\.173|206\.95)|188\.196\.185)|\.(?:135\.92\.150|39\.73\.195))|8(?:9\.(?:2(?:18\.68\.1(?:38|0)|8\.65\.46)|123\.20\.250)|(?:2\.104\.12\.14|4\.15\.191\.25)4|0\.(?:191\.80\.110|36\.130\.135)|7\.(?:236\.208\.250|97\.235\.76)|8\.196\.131\.246|5\.214\.21\.201)|6(?:1\.(?:(?:40\.132\.11|141\.21\.3|70\.84\.12)4|67\.16\.68)|0\.(?:2(?:48\.139\.80|08\.56\.19)|199\.178\.121)|7\.(?:198\.252\.242|229\.70\.124)|5\.23\.153\.131)|4(?:1\.(?:13(?:7\.2[04]\.4|9\.175\.242)|208\.106\.244)|6\.(?:16(?:3\.180\.124|5\.236\.31)|249\.110\.18))|7(?:7\.(?:106\.232\.178|41\.1\.12)|8\.138\.102\.118|9\.143\.176\.97|0\.34\.203\.21)|9(?:3\.(?:174\.90\.230|95\.184\.236|78\.170\.23)|0\.191\.0\.55|4\.79\.4\.2)|3(?:7\.2(?:33\.33\.138
|12\.6\.164)|6\.239\.70\.129))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:5\.(?:1(?:08\.28\.69|13\.30\.62)|249\.161\.90)|2\.2(?:1(?:6\.130\.34|7\.161\.58)|20\.31\.10)|9\.(?:134\.251\.187|36\.138\.131|40\.53\.90)|0\.(?:93\.128\.(?:40|6)|45\.145\.24)|8\.(?:165\.209\.101|99\.251\.45)|4\.(?:113\.221\.66|41\.129\.77)|7\.(?:52\.82\.234|34\.72\.51)|1\.252\.163\.242|6\.124\.128\.193)|2(?:1\.(?:(?:144\.174\.1|66\.181\.20)2|2(?:54\.228\.25|2\.127\.17)|78\.90\.216)|4\.(?:1(?:72\.238\.146|25\.156\.52|65\.228\.18)|(?:243\.124\.20|7\.41\.1)6)|3\.(?:254\.110\.119|18\.151\.1)|0\.88\.217\.212|2\.225\.62\.211|5\.75\.235\.127|8\.121\.86\.224)|9(?:0\.(?:1(?:0(?:7\.140\.74|9\.164\.81)|74\.31\.187)|85\.49\.243|25\.231\.8)|2\.(?:1(?:51\.145\.1(?:6[26]|7[23])|74\.84\.47)|69\.88\.18[69])|5\.(?:16(?:1\.40\.10|2\.48\.72)|225\.59\.111)|8\.23\.143\.(?:34|47|59)|4\.158\.204\.250|7\.156\.65\.94)|0(?:9\.(?:2(?:36\.8(?:5\.(?:5[467]|6[24]|48)|8\.20[0345])|05\.252\.215)|68\.190\.44|87\.168\.26)|3\.(?:244\.2\.(?:2[24]|11)|9\.
157\.174)|1\.44\.3\.50)|7(?:8\.1(?:5(?:0\.156\.219|1\.86\.1)|63\.105\.52)|5\.(?:126\.145\.247|41\.18\.90)|6\.5(?:3\.233\.76|7\.72\.75)|7\.(?:36\.243\.6|99\.203\.2))|4(?:(?:1\.105\.27\.13|4\.76\.6\.17)4|0\.133\.9\.106|9\.255\.3\.158)|8(?:7\.(?:9\.219\.104|17\.53\.10)|0\.176\.167\.183|1\.53\.76\.120)|(?:30\.193\.121\.16|\.85\.17\.8)2|59\.224\.76\.65)|2(?:1(?:0\.(?:2(?:1(?:\.244\.1(?:2[15]|19)|0\.125\.134|7\.196\.58)|45\.226\.87)|1(?:8(?:3\.11\.151|\.188\.206)|68\.50\.16))|8\.(?:2(?:(?:04\.174\.|2\.180\.2)28|32\.109\.194|48\.16\.180)|56\.37\.250|61\.18\.178)|3\.(?:2(?:30\.128\.226|21\.9\.13)|192\.3\.66|55\.72\.14)|1\.(?:2(?:06\.121\.66|45\.23\.133)|104\.184\.195)|7\.(?:197\.72\.124|200\.184\.87)|6\.15\.146\.236|2\.97\.63\.154|9\.147\.172\.2)|0(?:2\.(?:1(?:1(?:1\.196\.21|3\.65\.229)|0(?:5\.134\.41|4\.22\.42)|91\.2(?:50\.202|00\.58))|51\.176\.70)|3\.(?:1(?:4(?:4\.170\.98|5\.84\.73)|66\.220\.159)|237\.226\.116)|5\.234\.1(?:45\.1(?:3[02]|29|40)|36\.79)|9\.238\.180\.110|0\.107\.124\
.36)|2(?:1\.2(?:14\.2(?:08\.226|14\.187)|34\.24\.46|\.144\.135)|2\.(?:1(?:74\.255\.238|28\.9\.37)|92\.112\.66)|0\.90\.201\.236))|5(?:8\.(?:2(?:1(?:3\.157\.68|5\.81\.185)|27\.21\.27)|64\.(?:228\.224|177\.63)|120\.227\.143)|9\.(?:(?:37\.168\.1|60\.7\.14)6|90\.(?:192\.173|206\.95)|188\.196\.185)|\.(?:135\.92\.150|39\.73\.195)|4\.246\.116\.241)|6(?:1\.(?:(?:40\.132\.11|70\.84\.12)4|2\.132\.11|67\.16\.68)|0\.(?:2(?:48\.139\.80|08\.56\.19)|199\.178\.121)|7\.(?:198\.252\.242|229\.70\.124)|5\.23\.153\.131|6\.85\.174\.46)|8(?:9\.(?:2(?:18\.68\.1(?:3?8|0)|8\.65\.46)|136\.170\.109)|0\.(?:191\.80\.110|36\.130\.135)|7\.(?:236\.208\.250|97\.235\.76)|8\.196\.131\.246|4\.15\.191\.254|5\.214\.21\.201)|4(?:1\.(?:13(?:7\.2[04]\.4|9\.175\.242)|208\.106\.244)|6\.163\.180\.124)|7(?:7\.(?:106\.232\.178|41\.1\.12)|9\.143\.176\.97|0\.34\.203\.21)|9(?:(?:1\.235\.126\.9|4\.79\.4\.)2|3\.95\.184\.236|0\.191\.0\.55)|3(?:7\.2(?:33\.33\.138|12\.6\.164)|6\.239\.70\.129))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
@@ -146,14 +146,14 @@ score KHOP_SC_TOP200 4 0 4 0 # unneces
# Spamhaus DROP, http://www.spamhaus.org/drop/
-header KHOP_SPAMHAUS_DROP X-Spam-Relays-Untrusted =~ /(?-xism: (?:by|ip)=(?:1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345
]?)|62\.2(?:2[0123]|0[89]|1\d)|76\.(?:6[0123]|4[89]|5\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|67\.16[0123]?|31\.21[23]|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[58]4|41)|2(?:07|45))|4\.(?:1(?:10|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789]|8\.178)|6(?:\.(?:100|213)|9\.25[01])|78\.1(?:2[0123]|72)|1(?:0\.136|1\.235)|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|7\.2(?:3[23]|4[67])|(?:43\.16|3\.12)6)|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)
|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.16[23]|\.161)|78\.10[89])|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|5(?:4\.15[6789]|0\.116)|6(?:3\.14[4567]|0\.242)|2(?:42\.[23]|9\.185)|44\.4)|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)|5(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.2(?:3[12]|26)|9\.(?:141|223)|0\.1(?:26|41)|1\.123|2\.147|5\.190)|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:4[89]|5\d))|(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136\.(?:1[67]|2[27])|6\.185\.254)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]
\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01])|9\.42\.4[0123])|7(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:1(?:06|13|20)|67)|6\.47)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.2(?:05\.(?:[06789]|5[012345]?|[1234]\d?)|49\.1(?:[678]\d|9[01]))|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.232|2\.125)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|0(?:3\.(?:1(?:4\.2(?:0[89]|1[01])|0\.(?:6[89]|7[01]))|2(?:46\.7[2345]|\.4[4567])|7\.20[4567])|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.94\.2(?:2[0123]|0[89]|1\d)))\.(?:[01]?\d?\d|2[0-
4]\d|25[0-5])|8(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0)|(?:6\.190\.2(?:2[456789]|3[01])|8\.247\.(?:135|230))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])))|(?:9(?:1\.(?:2(?:1(?:2\.(?:1(?:23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|26)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:22|6)[4567]|6\.(?:190|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[89]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:0\.1(?:1[01]|4[37])|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|1\.156|5\.2)|2(?:0\.(?:35|62|90)|8\.(?:132|39)|9\.248|3\.77)|4(?:(?:0\.16|3\.11)5|2\.217))|19(?:3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|8\.1(?:09|27)|7\.9[6789]|4\.[01]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[034567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(
?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:1[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?)|85\.2(?:2[456789]|3\d))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|234\.2(?:2[456789]|3\d))|2\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789]))|3\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|141\.(?:3[23456789]|6[0123]|[45]\d))|[01]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|6\.231\.(?:6[456789]|7\d))|3(?:7\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:46\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|30\.212)|1(?:48\.2(?:1[6789]|2[0123])|39\.49))|1\.(?:(?
:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|42\.1(?:[345]\d|2[89])|222\.20[01234567]|1(?:4\.10|1\.4)3)|[02345689]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|8(?:1\.(?:4\.(?:[0789]|[12345]\d?|6[0123]?)|162\.1(?:[345678]\d|2[89]|9[01])|22\.15[23])|5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140))|5(?:\.(?:(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7[2345])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|62\.(?:2(?:5[012345]|[01234]\d)|1(?:[3456789]\d|2[89])))|8\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|83\.(?:[89]|1[01]))|[012345679]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.110\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3
[01]|4[89])|2\.13\.(?:1[6789]|3[01]|2\d)|4\.123\.(?:10[0123]|9[6789])|8\.31\.1(?:8[456789]|9[01]))|(?:4\d?|0)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:0(?:(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|94\.1(?:8[456789]|9[01])|47\.2(?:5[012345]|4\d)|26\.24[45]|30\.167)|2(?:3(?:7\.(?:1(?:7[012345]|3[6789]|4[0123]|6[89])|2(?:3[23456789]|4[01234567]))|6\.(?:[0456789]|[12]\d?|3[01]?))|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]
|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|1(?:23\.1(?:[345]\d|2[89])|97\.(?:2[89]|175))|81\.(?:[0456789]|[12]\d?|3[01]?))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|51\.(?:3[23456789]|4[01234567]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.(?:10[0123]|9[6789])|0\.[01234567])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|1\.7(?:1\.(?:[023456789]|1
[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))|(?:1(?:6\.(?:1(?:51\.(?:19[23456789]|20[01234567])|62\.1(?:1[23456789]|2[01234567]))|212\.(?:2(?:2[0123]|[01]\d)|19[23456789]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789]))|[23456789]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])))\b)/
+header KHOP_SPAMHAUS_DROP X-Spam-Relays-Untrusted =~ /(?-xism: (?:by|ip)=(?:1(?:9(?:(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345
]?)|62\.2(?:2[0123]|0[89]|1\d)|76\.(?:6[0123]|4[89]|5\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|67\.16[0123]?|31\.21[23]|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[58]4|41)|2(?:07|45))|4\.(?:1(?:10|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789]|8\.178)|6(?:\.(?:100|213)|9\.25[01])|78\.1(?:2[0123]|72)|1(?:0\.136|1\.235)|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|7\.2(?:3[23]|4[67])|(?:43\.16|3\.12)6)|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)
|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.16[23]|\.161)|78\.10[89])|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|5(?:4\.15[6789]|0\.116)|6(?:3\.14[4567]|0\.242)|2(?:42\.[23]|9\.185)|44\.4))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))|(?:(?:3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)|5(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.2(?:3[12]|26)|9\.(?:141|223)|0\.1(?:26|41)|1\.123|2\.147|5\.190)|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:4[89]|5\d))|(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136\.(?:1[6
7]|2[27])|6\.185\.254)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01])|9\.42\.4[0123])|7(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:1(?:06|13|20)|67)|6\.47)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.2(?:05\.(?:[06789]|5[012345]?|[1234]\d?)|49\.1(?:[678]\d|9[01]))|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.232|2\.125)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|0(?:3\.(?:1(?:4\.2(?:0[89]|1[01])|0\.(?:6[89]|7[01]))|2(?:46\.7[2345]|\.4[4567])|7\.20[4567])|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(
?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|6\.190\.2(?:2[456789]|3[01])|8\.247\.(?:135|230)))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:9(?:1\.(?:2(?:1(?:2\.(?:1(?:23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|26)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:22|6)[4567]|6\.(?:190|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[89]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:0\.1(?:1[01]|4[37])|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|1\.156|5\.2)|2(?:0\.(?:35|62|90)|8\.(?:132|39)|9\.248|3\.77)|4(?:(?:0\.16|3\.11)5|2\.217))|19(?:3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|8\.1(?:09|27)|7\.9[6789]|4\.[01]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[034567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(
?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:1[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?)|85\.2(?:2[456789]|3\d))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|234\.2(?:2[456789]|3\d))|2\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789]))|3\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|141\.(?:3[23456789]|6[0123]|[45]\d))|[01]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|6\.231\.(?:6[456789]|7\d))|3(?:7\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:46\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|30\.212)|1(?:48\.2(?:1[6789]|2[0123])|39\.49))|1\.(?:(?
:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|42\.1(?:[345]\d|2[89])|222\.20[01234567]|1(?:4\.10|1\.4)3)|[02345689]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|8(?:1\.(?:4\.(?:[0789]|[12345]\d?|6[0123]?)|162\.1(?:[345678]\d|2[89]|9[01])|22\.15[23])|5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140))|5(?:\.(?:(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7[2345])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|62\.(?:2(?:5[012345]|[01234]\d)|1(?:[3456789]\d|2[89])))|8\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|83\.(?:[89]|1[01]))|[012345679]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.110\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3
[01]|4[89])|2\.13\.(?:1[6789]|3[01]|2\d)|4\.123\.(?:10[0123]|9[6789])|8\.31\.1(?:8[456789]|9[01]))|(?:4\d?|0)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|94\.1(?:8[456789]|9[01])|47\.2(?:5[012345]|4\d)|26\.24[45]|30\.167)|2(?:3(?:7\.(?:1(?:7[012345]|3[6789]|4[0123]|6[89])|2(?:3[23456789]|4[01234567]))|6\.(?:[0456789]|[12]\d?|3[01]?))|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]
|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|1(?:23\.1(?:[345]\d|2[89])|97\.(?:2[89]|175))|81\.(?:[0456789]|[12]\d?|3[01]?))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|51\.(?:3[23456789]|4[01234567]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.(?:10[0123]|9[6789])|0\.[01234567])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|\.(?:[01]?\d?\d|2[0-4]\d|2
5[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|[23456789]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:(?:6\.(?:1(?:51\.(?:19[23456789]|20[01234567])|62\.1(?:1[23456789]|2[01234567]))|212\.(?:2(?:2[0123]|[01]\d)|19[23456789]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))))\b)/
describe KHOP_SPAMHAUS_DROP Relay listed in Spamhaus Don't Route Or Peer List
tflags KHOP_SPAMHAUS_DROP nopublish
score KHOP_SPAMHAUS_DROP 1 0.2 1 0.2
# spam/ham s/o corpus
# 0.0349/0.0029 0.924 20110227@510k
-header KHOP_SPAMHAUS_DROP_LE X-Spam-Relays-External =~ /^[^]]*(?-xism: (?:by|ip)=(?:1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|
1[012345]?)|62\.2(?:2[0123]|0[89]|1\d)|76\.(?:6[0123]|4[89]|5\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|67\.16[0123]?|31\.21[23]|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[58]4|41)|2(?:07|45))|4\.(?:1(?:10|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789]|8\.178)|6(?:\.(?:100|213)|9\.25[01])|78\.1(?:2[0123]|72)|1(?:0\.136|1\.235)|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|7\.2(?:3[23]|4[67])|(?:43\.16|3\.12)6)|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67
]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.16[23]|\.161)|78\.10[89])|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|5(?:4\.15[6789]|0\.116)|6(?:3\.14[4567]|0\.242)|2(?:42\.[23]|9\.185)|44\.4)|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)|5(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.2(?:3[12]|26)|9\.(?:141|223)|0\.1(?:26|41)|1\.123|2\.147|5\.190)|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:4[89]|5\d))|(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136\.(?:1[67]|2[27])|6\.185\.254)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\
d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01])|9\.42\.4[0123])|7(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:1(?:06|13|20)|67)|6\.47)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.2(?:05\.(?:[06789]|5[012345]?|[1234]\d?)|49\.1(?:[678]\d|9[01]))|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.232|2\.125)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|0(?:3\.(?:1(?:4\.2(?:0[89]|1[01])|0\.(?:6[89]|7[01]))|2(?:46\.7[2345]|\.4[4567])|7\.20[4567])|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.94\.2(?:2[0123]|0[89]|1\d)))\.(?:[01]?\d
?\d|2[0-4]\d|25[0-5])|8(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0)|(?:6\.190\.2(?:2[456789]|3[01])|8\.247\.(?:135|230))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])))|(?:9(?:1\.(?:2(?:1(?:2\.(?:1(?:23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|26)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:22|6)[4567]|6\.(?:190|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[89]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:0\.1(?:1[01]|4[37])|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|1\.156|5\.2)|2(?:0\.(?:35|62|90)|8\.(?:132|39)|9\.248|3\.77)|4(?:(?:0\.16|3\.11)5|2\.217))|19(?:3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|8\.1(?:09|27)|7\.9[6789]|4\.[01]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[034567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]
))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:1[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?)|85\.2(?:2[456789]|3\d))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|234\.2(?:2[456789]|3\d))|2\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789]))|3\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|141\.(?:3[23456789]|6[0123]|[45]\d))|[01]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|6\.231\.(?:6[456789]|7\d))|3(?:7\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:46\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|30\.212)|1(?:48\.2(?:1[6789]|2[0123])|39\.49))|
1\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|42\.1(?:[345]\d|2[89])|222\.20[01234567]|1(?:4\.10|1\.4)3)|[02345689]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|8(?:1\.(?:4\.(?:[0789]|[12345]\d?|6[0123]?)|162\.1(?:[345678]\d|2[89]|9[01])|22\.15[23])|5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140))|5(?:\.(?:(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7[2345])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|62\.(?:2(?:5[012345]|[01234]\d)|1(?:[3456789]\d|2[89])))|8\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|83\.(?:[89]|1[01]))|[012345679]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.110\.(?:1(?:[678]\d?|9[01]?)|6[0123]|
[25]\d|3[01]|4[89])|2\.13\.(?:1[6789]|3[01]|2\d)|4\.123\.(?:10[0123]|9[6789])|8\.31\.1(?:8[456789]|9[01]))|(?:4\d?|0)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:0(?:(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|94\.1(?:8[456789]|9[01])|47\.2(?:5[012345]|4\d)|26\.24[45]|30\.167)|2(?:3(?:7\.(?:1(?:7[012345]|3[6789]|4[0123]|6[89])|2(?:3[23456789]|4[01234567]))|6\.(?:[0456789]|[12]\d?|3[01]?))|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6
[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|1(?:23\.1(?:[345]\d|2[89])|97\.(?:2[89]|175))|81\.(?:[0456789]|[12]\d?|3[01]?))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|51\.(?:3[23456789]|4[01234567]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.(?:10[0123]|9[6789])|0\.[01234567])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|1\.7(?:1\.(?:[0234
56789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))|(?:1(?:6\.(?:1(?:51\.(?:19[23456789]|20[01234567])|62\.1(?:1[23456789]|2[01234567]))|212\.(?:2(?:2[0123]|[01]\d)|19[23456789]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789]))|[23456789]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])))\b)/
+header KHOP_SPAMHAUS_DROP_LE X-Spam-Relays-External =~ /^[^]]*(?-xism: (?:by|ip)=(?:1(?:9(?:(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|
1[012345]?)|62\.2(?:2[0123]|0[89]|1\d)|76\.(?:6[0123]|4[89]|5\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|67\.16[0123]?|31\.21[23]|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[58]4|41)|2(?:07|45))|4\.(?:1(?:10|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789]|8\.178)|6(?:\.(?:100|213)|9\.25[01])|78\.1(?:2[0123]|72)|1(?:0\.136|1\.235)|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|7\.2(?:3[23]|4[67])|(?:43\.16|3\.12)6)|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67
]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.16[23]|\.161)|78\.10[89])|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|5(?:4\.15[6789]|0\.116)|6(?:3\.14[4567]|0\.242)|2(?:42\.[23]|9\.185)|44\.4))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))|(?:(?:3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)|5(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.2(?:3[12]|26)|9\.(?:141|223)|0\.1(?:26|41)|1\.123|2\.147|5\.190)|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:4[89]|5\d))|(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136
\.(?:1[67]|2[27])|6\.185\.254)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01])|9\.42\.4[0123])|7(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:1(?:06|13|20)|67)|6\.47)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.2(?:05\.(?:[06789]|5[012345]?|[1234]\d?)|49\.1(?:[678]\d|9[01]))|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.232|2\.125)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|0(?:3\.(?:1(?:4\.2(?:0[89]|1[01])|0\.(?:6[89]|7[01]))|2(?:46\.7[2345]|\.4[4567])|7\.20[4567])|\.(?:[01]?\d?\d|2[0-4]\d|25[
0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|6\.190\.2(?:2[456789]|3[01])|8\.247\.(?:135|230)))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:9(?:1\.(?:2(?:1(?:2\.(?:1(?:23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|26)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:22|6)[4567]|6\.(?:190|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[89]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:0\.1(?:1[01]|4[37])|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|1\.156|5\.2)|2(?:0\.(?:35|62|90)|8\.(?:132|39)|9\.248|3\.77)|4(?:(?:0\.16|3\.11)5|2\.217))|19(?:3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|8\.1(?:09|27)|7\.9[6789]|4\.[01]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[034567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]
))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:1[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?)|85\.2(?:2[456789]|3\d))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|234\.2(?:2[456789]|3\d))|2\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789]))|3\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|141\.(?:3[23456789]|6[0123]|[45]\d))|[01]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|6\.231\.(?:6[456789]|7\d))|3(?:7\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:46\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|30\.212)|1(?:48\.2(?:1[6789]|2[0123])|39\.49))|
1\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|42\.1(?:[345]\d|2[89])|222\.20[01234567]|1(?:4\.10|1\.4)3)|[02345689]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|8(?:1\.(?:4\.(?:[0789]|[12345]\d?|6[0123]?)|162\.1(?:[345678]\d|2[89]|9[01])|22\.15[23])|5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140))|5(?:\.(?:(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7[2345])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|62\.(?:2(?:5[012345]|[01234]\d)|1(?:[3456789]\d|2[89])))|8\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|83\.(?:[89]|1[01]))|[012345679]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.110\.(?:1(?:[678]\d?|9[01]?)|6[0123]|
[25]\d|3[01]|4[89])|2\.13\.(?:1[6789]|3[01]|2\d)|4\.123\.(?:10[0123]|9[6789])|8\.31\.1(?:8[456789]|9[01]))|(?:4\d?|0)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|94\.1(?:8[456789]|9[01])|47\.2(?:5[012345]|4\d)|26\.24[45]|30\.167)|2(?:3(?:7\.(?:1(?:7[012345]|3[6789]|4[0123]|6[89])|2(?:3[23456789]|4[01234567]))|6\.(?:[0456789]|[12]\d?|3[01]?))|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6
[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|1(?:23\.1(?:[345]\d|2[89])|97\.(?:2[89]|175))|81\.(?:[0456789]|[12]\d?|3[01]?))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|51\.(?:3[23456789]|4[01234567]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.(?:10[0123]|9[6789])|0\.[01234567])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|\.(?:[01]?\d?\d|2[
0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|[23456789]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:(?:6\.(?:1(?:51\.(?:19[23456789]|20[01234567])|62\.1(?:1[23456789]|2[01234567]))|212\.(?:2(?:2[0123]|[01]\d)|19[23456789]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))))\b)/
describe KHOP_SPAMHAUS_DROP_LE Relay listed in Spamhaus Don't Route Or Peer List
tflags KHOP_SPAMHAUS_DROP_LE nopublish
score KHOP_SPAMHAUS_DROP_LE 2 0 2 0 # adds to KHOP_SPAMHAUS_DROP
@@ -163,7 +163,7 @@ score KHOP_SPAMHAUS_DROP_LE 2 0 2 0 #
# PSBL-neighbors: any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
# as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:21\.63\.(?:1[6789]|23)|09\.127\.81|10\.165\.18|75\.106\.72)|8(?:2\.115\.210|5\.153\.112|4\.235\.91)|91\.21(?:1\.163|4\.219)|41\.(?:77\.141|254\.5)|75\.75\.225)\.[012]?\d{1,2}\b)/
+header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:21\.63\.1[6789]|09\.127\.81|75\.106\.72|97\.252\.0)|8(?:2\.115\.210|5\.153\.112|4\.235\.91)|91\.21(?:(?:4\.21|9\.3)9|1\.163)|41\.77\.141|75\.75\.225)\.[012]?\d{1,2}\b)/
describe KHOP_PSBL_CIDR24 Relay's IP/24 CIDR contains many PSBL hits
tflags KHOP_PSBL_CIDR24 nopublish
score KHOP_PSBL_CIDR24 2 0.6 2 0.6